program: r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @hyper}, 0x10) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000040), 0x4) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'aio_iiro_16\x00', [0x4f27, 0x400, 0x4, 0x4, 0x5, 0x6, 0x6, 0x7, 0xa, 0x1, 0x2, 0x80000, 0x1, 0x8, 0x1e, 0x1, 0x0, 0x1a449, 0x3, 0x6, 0x81, 0xcaa7, 0x4, 0x1e58, 0xb, 0x3, 0x3c, 0x8, 0x80000000, 0x0, 0x5]}) r2 = socket$netlink(0x10, 0x3, 0xc) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x10) syz_emit_ethernet(0x6a, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @dest_unreach={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @loopback, @local, {[@ra={0x94, 0x4}, @cipso={0x86, 0x25, 0x0, [{0x0, 0x10, "f79eb4cf48b5a5788fc15a45b5b1"}, {0x0, 0xf, "749018c9a54b61394327f11535"}]}]}}}}}}}, 0x0) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xa2, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x20040, 0x0) ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f00000001c0)={'syzkaller0\x00', 0x200}) sendmsg$NFT_BATCH(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}, {0x2c, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "ac"}]}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xf8}, 0x1, 0x0, 0x0, 0x4}, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket(0x10, 0x3, 0x0) r8 = syz_init_net_socket$ax25(0x3, 0x3, 0xce) connect(r8, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000380)) r10 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x1c1200, 0x100) io_uring_register$IORING_REGISTER_MEM_REGION(r10, 0x22, &(0x7f0000000280)={&(0x7f0000000240)={&(0x7f0000001cc0)="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", 0x1000, 0x0, 0x0, 0x1}, 0x1}, 0x1) sendmsg$nl_route(r7, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="380000006800010000000000000000000a000000000000000600070008000000100008800c00010000000a000000000008000500", @ANYRES32=r9, @ANYBLOB="457640cb27eda6bf96685fa1763be78b0b4946f4a3ec569a755646755bdaecbc9bd9d6ad4c50df0df70b15b0421be767fd1939ad18d081db9513e8e3eb836857421cb85b2480b1753018b595b88317f82fafe5465099f559a54fc917a3cab51bb66b35230a69b0ab71f263b9e8cf1f2b4337e4bbfe36248fe4"], 0x38}}, 0x0) setsockopt$inet6_udp_int(r6, 0x11, 0x67, &(0x7f0000000000)=0x6, 0x4) sendmmsg$inet6(r6, &(0x7f0000001c80)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x0, @mcast2, 0x6}, 0x1c, 0x0}}], 0x1, 0x8000) sendmmsg$inet6(r6, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000080)={0xa, 0x4e21, 0xe60, @empty, 0x7}, 0x1c, &(0x7f0000000e80)=[{&(0x7f00000000c0)="ae6be4ebd72ff87ba48c56606273b3fff81cee35f8dcacf55ced1c7c8ded293224cf455ef3a1374991e6440ddc867828a2a24584dbf42b1dadfe909890f4af52dffcd912bf791290a6a92aab5df95fc6c5a56863d984431436ed8dcafbd2246e788430d5991de66e73ee50d106dbc41431f01fdad90d841f7b07fee932ce1a7afb5fd6e0cf5d3b9889014c4f479bfdf4d80d8fde73ac7b1394d32086e72f6f8cd7cee3b7c6f6b4ea0c80e7ca90c554c54745598fc17a3ee3be05973ef02568a7b09758487168bbc4e3d3b33416e9576e68b14e10956e78", 0xd7}, {&(0x7f0000000ac0)="9a5351aed77d91fbf86f6190a5148ebcdee3ceeca11cdd6832e6b668e89115be8d462c40970ca6a80f6e6f6cae08ef3c5443e8074cb68302d4066ec9a2566559c3b78ab920593519b124e9f5e82432853c9ccc2f694346cde6703159ff5ea375434cb9dfe04f523e71f4ca18764bf8148b3c2c6cbf08da99e4816bc7453ccfbb3b30f19baba1928fd4f898c97009f3976abea5348669ac9e160a68aabe4a5b826a740dbfbdd266a83e8d62349b9725cda71ea124aea38a532d3d5e5a8218992a876e27979048c55b4f9cdc1502d65ab5b052", 0xd2}, {&(0x7f0000000bc0)="da7e95cd547333070aa0a05b88fabb118be09fc7723812d393f2a7a88247be0b5f13a424f529beeb5181de3820f5b9d6d94b876196d506cd6ea1acdd84f4899812d2f7c4c18bcc4b89447b8e0a6cf2baa12ce23e28f5f1ec", 0x58}, {&(0x7f0000000c40)="d5c14fa3b8ea82159f176a817c130a0ee7c3c93b6a3a5a2134d5db9ed4578b7551eef7c7e7c79e71aa2afa4a1ebe04fb4e7f99f21226c94933e8f50f260353e9eb0298d87a6fd22f215769e1112dbc3b89e67004436d73be84bbb16343eac8261c", 0x61}, {&(0x7f0000000cc0)="9ba3be80c5ccd545bfcdf61014f7accf66aa38f2fd0aab9ff350319f8f46fa85e86075ac2c19818d524895b565371250778d9f6366edb770eb28c2c4d5e468865d55ee2ebe2920202a39c3e780ab25a678d15faf6a66715aa17af8f1716264becf437bff7aa180bc314f9bf090db51613907beea84f35264577452ce2e80bcf3aeaee6da65d44350196241c133c4b464156fe0b5ae8bb83fb7580a2c451ecf", 0x9f}], 0x5}}], 0x2, 0x4044) [ 74.343411][ T5320] Bluetooth: hci0: command tx timeout [ 74.387064][ T5340] ------------[ cut here ]------------ [ 74.389526][ T5340] UBSAN: shift-out-of-bounds in drivers/comedi/drivers/aio_iiro_16.c:180:9 [ 74.425484][ T5340] shift exponent 1024 is too large for 32-bit type 'int' [ 74.428127][ T5340] CPU: 0 UID: 0 PID: 5340 Comm: syz.0.0 Not tainted 6.16.0-rc5-syzkaller-00224-g379f604cc3dc #0 PREEMPT(full) [ 74.428140][ T5340] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 74.428145][ T5340] Call Trace: [ 74.428150][ T5340] [ 74.428154][ T5340] dump_stack_lvl+0x189/0x250 [ 74.428228][ T5340] ? __pfx_dump_stack_lvl+0x10/0x10 [ 74.428243][ T5340] ? __pfx__printk+0x10/0x10 [ 74.428263][ T5340] ? __pfx___request_region_locked+0x10/0x10 [ 74.428281][ T5340] ubsan_epilogue+0xa/0x40 [ 74.428295][ T5340] __ubsan_handle_shift_out_of_bounds+0x386/0x410 [ 74.428338][ T5340] ? __request_region+0xc2/0xe0 [ 74.428355][ T5340] ? comedi_request_region+0x7b/0x180 [ 74.428401][ T5340] aio_iiro_16_attach+0x5e8/0x790 [ 74.428415][ T5340] comedi_device_attach+0x51d/0x670 [ 74.428426][ T5340] comedi_unlocked_ioctl+0x686/0xf40 [ 74.428441][ T5340] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 74.428463][ T5340] ? __lock_acquire+0xab9/0xd20 [ 74.428479][ T5340] ? __fget_files+0x2a/0x420 [ 74.428490][ T5340] ? __fget_files+0x2a/0x420 [ 74.428499][ T5340] ? __fget_files+0x3a0/0x420 [ 74.428508][ T5340] ? __fget_files+0x2a/0x420 [ 74.428518][ T5340] ? bpf_lsm_file_ioctl+0x9/0x20 [ 74.428526][ T5340] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 74.428536][ T5340] __se_sys_ioctl+0xfc/0x170 [ 74.428545][ T5340] do_syscall_64+0xfa/0x3b0 [ 74.428575][ T5340] ? lockdep_hardirqs_on+0x9c/0x150 [ 74.428590][ T5340] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.428601][ T5340] ? clear_bhb_loop+0x60/0xb0 [ 74.428614][ T5340] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.428625][ T5340] RIP: 0033:0x7ff49c38e929 [ 74.428635][ T5340] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 74.428641][ T5340] RSP: 002b:00007ff49d273038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 74.428651][ T5340] RAX: ffffffffffffffda RBX: 00007ff49c5b5fa0 RCX: 00007ff49c38e929 [ 74.428656][ T5340] RDX: 00002000000000c0 RSI: 0000000040946400 RDI: 0000000000000003 [ 74.428661][ T5340] RBP: 00007ff49c410b39 R08: 0000000000000000 R09: 0000000000000000 [ 74.428665][ T5340] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 74.428669][ T5340] R13: 0000000000000000 R14: 00007ff49c5b5fa0 R15: 00007ffc7f4b4098 [ 74.428680][ T5340] [ 74.428683][ T5340] ---[ end trace ]--- [ 74.560311][ T5340] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 74.563478][ T5340] CPU: 0 UID: 0 PID: 5340 Comm: syz.0.0 Not tainted 6.16.0-rc5-syzkaller-00224-g379f604cc3dc #0 PREEMPT(full) [ 74.568513][ T5340] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 74.573117][ T5340] Call Trace: [ 74.574666][ T5340] [ 74.576108][ T5340] dump_stack_lvl+0x99/0x250 [ 74.578103][ T5340] ? __asan_memcpy+0x40/0x70 [ 74.579931][ T5340] ? __pfx_dump_stack_lvl+0x10/0x10 [ 74.582178][ T5340] ? __pfx__printk+0x10/0x10 [ 74.584059][ T5340] panic+0x2db/0x790 [ 74.585638][ T5340] ? __pfx_panic+0x10/0x10 [ 74.587445][ T5340] ? _printk+0xcf/0x120 [ 74.589180][ T5340] ? __pfx__printk+0x10/0x10 [ 74.591092][ T5340] check_panic_on_warn+0x89/0xb0 [ 74.593258][ T5340] __ubsan_handle_shift_out_of_bounds+0x386/0x410 [ 74.596219][ T5340] ? __request_region+0xc2/0xe0 [ 74.598281][ T5340] ? comedi_request_region+0x7b/0x180 [ 74.600376][ T5340] aio_iiro_16_attach+0x5e8/0x790 [ 74.602472][ T5340] comedi_device_attach+0x51d/0x670 [ 74.604618][ T5340] comedi_unlocked_ioctl+0x686/0xf40 [ 74.606995][ T5340] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 74.609508][ T5340] ? __lock_acquire+0xab9/0xd20 [ 74.611607][ T5340] ? __fget_files+0x2a/0x420 [ 74.613647][ T5340] ? __fget_files+0x2a/0x420 [ 74.615648][ T5340] ? __fget_files+0x3a0/0x420 [ 74.617870][ T5340] ? __fget_files+0x2a/0x420 [ 74.620025][ T5340] ? bpf_lsm_file_ioctl+0x9/0x20 [ 74.622229][ T5340] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 74.624778][ T5340] __se_sys_ioctl+0xfc/0x170 [ 74.626888][ T5340] do_syscall_64+0xfa/0x3b0 [ 74.628915][ T5340] ? lockdep_hardirqs_on+0x9c/0x150 [ 74.632385][ T5340] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.635081][ T5340] ? clear_bhb_loop+0x60/0xb0 [ 74.637167][ T5340] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.639475][ T5340] RIP: 0033:0x7ff49c38e929 [ 74.641311][ T5340] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 74.649127][ T5340] RSP: 002b:00007ff49d273038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 74.652347][ T5340] RAX: ffffffffffffffda RBX: 00007ff49c5b5fa0 RCX: 00007ff49c38e929 [ 74.655432][ T5340] RDX: 00002000000000c0 RSI: 0000000040946400 RDI: 0000000000000003 [ 74.658544][ T5340] RBP: 00007ff49c410b39 R08: 0000000000000000 R09: 0000000000000000 [ 74.661764][ T5340] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 74.664846][ T5340] R13: 0000000000000000 R14: 00007ff49c5b5fa0 R15: 00007ffc7f4b4098 [ 74.668041][ T5340] [ 74.669756][ T5340] Kernel Offset: disabled [ 74.671720][ T5340] Rebooting in 86400 seconds..